PT-2022-17243 · Docker · Docker Desktop +1

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.5.1 Description: The issue allows attackers to move arbitrary files due to an incomplete fix for a previous problem. Recommendations: For versions prior to 4.5.1, update to version 4.5.1 or later to resolve...

Docker Desktop security vulnerabilities

Docker Desktop is a container technology-based desktop software for lightweight deployment of applications from the U.S. company Docker. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

CVE-2022-23774: Undefined Security Weakness

Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files...

CVE-2021-21692

FilePathrenameTo and FilePathmoveAllChildrenTo in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier only check 'read' agent-to-controller access permission on the source path, instead of 'delete'...

MoveKit - Cobalt Strike Kit For Lateral Movement

Movekit is an extension of built in Cobalt Strike lateral movement by leveraging the executeassembly function with the SharpMove and SharpRDP .NET assemblies. The aggressor script handles payload creation by reading the template files for a specific execution type. IMPORTANT: To use the script a...

Code42 Incydr Series: Bringing Shadow IT into the light with Code42 Incydr

Shadow IT is hardly a hidden threat to security professionals. Gartner was warning, way back in 2016, that 1 in 3 successful attacks experienced by enterprises would come from the use of unsanctioned apps by 2020. Code42’s Data Exposure Report just about proves Gartner’s prediction, showing that...

CVE-2020-9752

CVE-2020-9752 affects Naver Cloud Explorer prior to 2.2.2.11. The vulnerability enables an attacker to move a local file anywhere in the filesystem with system privileges via a named pipe. CVSS information in the provided data shows a high/critical impact (CVSS‑3.1: 9.8, NETWORK, NONE privileges ...

Directory traversal

The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../ directory traversal in the dirfrom and dirto parameters of an mrelocatormove action to the wp-admin/admin-ajax.php URI...

CVE-2018-19042

The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../ directory traversal in the dirfrom and dirto parameters of an mrelocatormove action to the wp-admin/admin-ajax.php URI...

CVE-2018-19042

CVE-2018-19042 affects the WordPress Media File Manager plugin (v1.4.2) via a directory traversal in mrelocator_move that lets an attacker move arbitrary files using dir_from/dir_to parameters to wp-admin/admin-ajax.php. OpenVAS and related entries flag multiple vulnerabilities in

CVE-2018-19042: Improper Limitation of a Pathname to a Restricted Directory

The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../ directory traversal in the dirfrom and dirto parameters of an mrelocatormove action to the wp-admin/admin-ajax.php URI...

PT-2019-9723

Name of the Vulnerable Software and Affected Versions Media File Manager plugin version 1.4.2 Description The issue allows for arbitrary file movement through a ../ directory traversal in the dir from and dir to parameters of an mrelocator move action to the "wp-admin/admin-ajax.php" URI...

Media File Manager <= 1.4.2 - Authenticated Multiple Vulnerabilities

Following the PoC you can combine the vulnerabilities to obtain PHP code execution and read sensitive file. By default the File Manager can only be used by Administrator users, however, any user role can be configured to use it. Diretory Trasversal: POST /wordpress/wp-admin/admin-ajax.php HTTP/1....

Directory traversal

In CMS Made Simple CMSMS through 2.2.7, the "file move" operation in the admin dashboard contains an arbitrary file movement vulnerability that can cause DoS, exploitable by an admin user, because config.php can be moved into an incorrect directory...

CVE-2018-10521

In CMS Made Simple CMSMS through 2.2.7, the "file move" operation in the admin dashboard contains an arbitrary file movement vulnerability that can cause DoS, exploitable by an admin user, because config.php can be moved into an incorrect directory...

CVE-2018-10521

In CMS Made Simple CMSMS through 2.2.7, the "file move" operation in the admin dashboard contains an arbitrary file movement vulnerability that can cause DoS, exploitable by an admin user, because config.php can be moved into an incorrect directory...

CVE-2018-10521

In CMS Made Simple CMSMS through 2.2.7, the "file move" operation in the admin dashboard contains an arbitrary file movement vulnerability that can cause DoS, exploitable by an admin user, because config.php can be moved into an incorrect directory...

CVE-2018-10521

CMS Made Simple (CMSMS) prior to version 2.2.7 contains an arbitrary file movement vulnerability in the admin dashboard’s “file move” operation. This issue can be exploited by an admin user to cause a denial of service by moving the config.php file into an incorrect directory. Root cause: the fil...

CVE-2018-10521: Unrestricted Upload of File with Dangerous Type

In CMS Made Simple CMSMS through 2.2.7, the "file move" operation in the admin dashboard contains an arbitrary file movement vulnerability that can cause DoS, exploitable by an admin user, because config.php can be moved into an incorrect directory...

PT-2018-9943

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions prior to 2.2.8 Description: The issue concerns an arbitrary file movement vulnerability in the "file move" operation within the admin dashboard. This can lead to a denial-of-service DoS condition. The vulnerability is...